The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.
References
Link | Resource |
---|---|
https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/ | Vendor Advisory |
Configurations
Information
Published : 2018-07-03 07:29
Updated : 2018-08-28 06:38
NVD link : CVE-2018-7776
Mitre link : CVE-2018-7776
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
schneider-electric
- u.motion_builder